Cybersecurity Compliance & Incident Reporting Support

This contract provides advisory and monitoring services to ensure strict adherence to NIST SP 800-171 and DFARS 252.204-7012 requirements for protecting controlled unclassified information within the defense industrial base. The scope includes ongoing assessment of cybersecurity controls, identification of compliance gaps, and implementation of corrective actions to meet federal standards. The contractor is responsible for supporting cyber incident reporting through the Defense Industrial Base Cybersecurity Portal, ensuring timely and accurate submission of incident data as mandated. Additionally, the contractor must manage the detection, containment, reporting, and analysis of malicious software incidents, maintaining full traceability and documentation throughout the incident lifecycle. Services are rendered under a subcontract to the Defense Logistics Agency under the Department of Defense, with performance tied to federal cybersecurity frameworks and regulatory obligations.